CVE-2017-12165

It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause possible http request smuggling.

Database specific

{
    "unresolved_ranges": [
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*"
            ],
            "vendor_product": "redhat:jboss_enterprise_application_platform",
            "extracted_events": [
                {
                    "last_affected": "7.0.0"
                },
                {
                    "last_affected": "7.1.0"
                }
            ]
        },
        {
            "source": "CPE_FIELD",
            "cpes": [
                "cpe:2.3:a:redhat:undertow:2.0.0:alpha_1:*:*:*:*:*:*"
            ],
            "vendor_product": "redhat:undertow",
            "extracted_events": [
                {
                    "last_affected": "2.0.0-alpha_1"
                }
            ]
        }
    ]
}

References

CVE-2017-12165

Affected packages